Binance hit by $6.3 billion cyberattack linked to North Korean hackers

Binance, the world's largest cryptocurrency exchange, has been hit by a massive cyberattack that compromised roughly $6.3 billion in digital assets. While the exchange has managed to freeze approximately $3 billion of the targeted holdings with the assistance of network partners and asset issuers, the incident marks one of the most severe breaches ever recorded in the digital currency sector.

According to a report by AFP, cybersecurity intelligence firms including Chainalysis, Elliptic, and TRM Labs suspect North Korea-backed operatives, commonly known as the Lazarus Group or TraderTraitor, are behind the breach. Analysts have noted that parts of the stolen assets have been linked to the same fund pools involved in a recent cyberattack on the Bitget platform, which was also linked to Pyongyang. If confirmed, this incident would dramatically surpass the $1.5 billion taken from Bybit in February 2025, which the FBI attributed to the same state-sponsored group.

Binance stated in a public post on social media platform X that its initial review pointed to a compromised engineer's laptop, along with other points of breach, as the avenue used to gain access. Blockchain systems rely heavily on private keys—cryptographic strings used to authorise transactions—to keep assets secure. When those keys or the computer systems governing transactions are penetrated via phishing, malicious software, or hardware vulnerabilities, attackers can siphon balances directly out of exchange control.

The exchange has pledged to cover user losses resulting from the attack. However, industry specialists caution that freezing funds does not guarantee they can be retrieved. Attackers often route stolen crypto through mixing services and tumblers designed to scramble transaction histories and obscure tracking efforts by law enforcement and analytics firms.

The breach adds to a difficult period of regulatory and legal pressure for Binance. The company reports serving 335 million registered users worldwide, a substantial share of the estimated 741 million cryptocurrency holders globally. Yet it has faced intense scrutiny across multiple jurisdictions, including past US convictions involving anti-money laundering compliance, separate regulatory allegations concerning unregistered securities, and French inquiries into client fund safeguards. Binance also recently instituted a partial pause on its European Union activities after failing to secure approvals under the bloc's Markets in Crypto Assets framework.